symfony vhost für web01-deuwo immobilien API - prod

diff --git a/customer/deuwo/web01-deutsche-wohnen-com.pixelpark.net.yaml b/customer/deuwo/web01-deutsche-wohnen-com.pixelpark.net.yaml
index 97b5ff30899c5d7186f382f5d8b80a5d6b5d9078..6e101db5ae3b46830f9a81222d123294b537e760 100644 (file)
--- a/customer/deuwo/web01-deutsche-wohnen-com.pixelpark.net.yaml
+++ b/customer/deuwo/web01-deutsche-wohnen-com.pixelpark.net.yaml
@@ -118,3 +118,46 @@ infra::profile::typo3::projects_composer_monolith:
           - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'
     php_admin_value:
       max_input_vars: '1500'
+
+# deuwo symfony API vhost
+
+infra::profile::apache::pp_vhosts:
+  symfony:
+    docroot: /var/www/immo/
+    servername: dev-api01-deutsche-wohnen-com.pixelpark.net
+    cert_servername: 'wildcard.pixelpark.net'
+    cert_customer: 'pixelpark'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    docroot_owner: apache
+    docroot_group: apache
+    docroot_mode: '2775'
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/immo/public'
+        addhandlers:
+          - { handler: "proxy:unix:/var/run/php-fpm-symfony.sock|fcgi://./" , extensions: '.php' }
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.php index.html
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    rewrites:
+      - alias:
+        comment: 'Alles auf https umleiten'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'